$ rpki-client -vvf rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft File: 8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft (raw, json) Hash identifier: oe1TikZUlNv5+zQhDtM1zBlgh6FNvnLMhoziQlbrSGY= Subject key identifier: 15:57:1A:76:38:CB:57:13:F1:14:66:EE:95:12:11:6C:F6:E0:78:BA Authority key identifier: 8F:04:9B:43:DD:61:28:5C:6C:DC:81:93:87:CA:D0:65:1B:0C:F3:8B Certificate issuer: /CN=8F049B43DD61285C6CDC819387CAD0651B0CF38B Certificate serial: 3C5D2A30D898CE0302BF617BC192821E2860AF05 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 05:47:08 +0000 Manifest this update: Tue 02 Jun 2026 05:42:08 +0000 Manifest next update: Wed 03 Jun 2026 08:43:08 +0000 Files and hashes: 1: 3130332e3137352e33382e302f32332d3234203d3e20313534343130.roa (hash: OeG/PNeipoOhOvGu8q4WBcsQGgNJ6UhKACe8udTmev0=) 2: 8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl (hash: xNkculcjZnBIhnL55HF/hcOLzgdrLuBf5VHr2ZeINyU=) 3: 3130332e3137352e33382e302f32332d3234203d3e20313437313038.roa (hash: Lndmx8VAy2DFBCTOeRbYATrs2gBsgQhEdnrs3xfeT3Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 08:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:5d:2a:30:d8:98:ce:03:02:bf:61:7b:c1:92:82:1e:28:60:af:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8F049B43DD61285C6CDC819387CAD0651B0CF38B Validity Not Before: Jun 2 05:42:08 2026 GMT Not After : Jun 3 08:43:08 2026 GMT Subject: CN=15571A7638CB5713F11466EE9512116CF6E078BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e8:bb:70:bd:05:74:ff:a6:e7:19:dc:95:b9: a7:28:2c:3a:6b:8c:9b:44:6c:e5:84:8b:3a:8f:aa: 2f:df:08:ac:05:8c:23:98:ec:c3:7f:b8:a9:4d:7a: 65:b2:d5:80:12:ea:33:84:c2:eb:06:14:58:4a:65: fd:56:d4:68:87:e6:1c:0c:1c:2d:9e:3f:ef:16:f0: e4:27:83:5d:8f:0f:e6:eb:a2:f2:b0:ee:04:1e:e3: 5a:5e:f2:29:1c:75:35:36:1b:e3:5f:2e:1f:ac:5f: 4f:d0:8c:b3:24:18:9c:3b:bd:25:df:86:c7:e6:99: b1:42:c1:5a:fa:e9:8e:08:5a:d4:94:03:ab:07:d0: 99:3a:62:0b:4b:e9:c5:70:14:f0:97:66:2a:e0:ba: e2:80:82:ed:d0:0d:f9:37:66:5e:b1:d2:0b:aa:47: 29:b8:9f:94:19:5f:e3:c5:8c:cc:45:27:5c:a0:61: b2:c6:e8:bf:e4:46:ac:12:97:1b:1c:c5:44:24:c7: 8a:b1:22:df:7a:ad:26:ae:81:52:e0:4e:61:c6:87: 5a:d6:8d:33:c4:d1:15:82:f3:d8:fd:94:c4:c0:99: e8:46:67:74:3e:a1:03:88:4f:31:d1:c0:29:5e:6c: a3:63:9e:81:4e:bc:7c:ed:4f:41:00:01:d9:87:1d: dd:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:57:1A:76:38:CB:57:13:F1:14:66:EE:95:12:11:6C:F6:E0:78:BA X509v3 Authority Key Identifier: keyid:8F:04:9B:43:DD:61:28:5C:6C:DC:81:93:87:CA:D0:65:1B:0C:F3:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/8F049B43DD61285C6CDC819387CAD0651B0CF38B.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0bb29378-45f0-49d3-a6af-573be7dca6d0/0/8F049B43DD61285C6CDC819387CAD0651B0CF38B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:a6:0f:37:05:c2:b6:00:07:e4:88:59:ba:1e:64:49:31:a9: 39:59:6f:a3:2d:ff:58:f4:66:fb:86:96:94:c5:16:12:4f:24: bf:16:bf:d8:e1:43:ea:c5:d8:4e:b3:09:69:5d:2f:97:03:ab: d0:b0:b8:62:8e:28:fc:4e:5d:d1:62:2b:26:ed:6b:c9:49:16: 55:c6:61:d1:9c:5b:aa:26:0a:d7:32:c4:13:ae:c4:35:1a:d0: 83:33:eb:a0:12:ab:96:b3:e8:bc:fe:c6:69:63:3a:e3:75:58: 8a:71:cc:da:f3:04:c5:ed:75:65:4c:d4:a7:06:d6:20:d9:a9: da:26:5b:26:93:51:50:d0:58:ff:05:dd:64:fc:1d:da:9f:70: b0:18:ed:94:de:f6:ba:24:f0:92:96:a1:25:35:52:7f:df:5b: d8:1d:62:06:c6:81:16:b0:53:50:97:1a:6d:c7:a0:df:16:da: 58:94:ed:a0:d8:3a:8a:fe:5b:c1:57:6a:e8:c0:bd:02:87:48: 04:9c:dc:f7:1c:00:b4:07:f3:b0:65:7e:6c:09:0b:8a:9d:0c: 35:b1:27:b3:8f:04:ad:3b:04:e0:46:7b:21:da:ff:d0:2b:00: 1a:b1:06:c5:61:54:ef:fb:4b:e7:a0:96:5c:bb:3d:da:0d:8e: 03:8a:52:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPF0qMNiYzgMCv2F7wZKCHihgrwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEYwNDlCNDNERDYxMjg1QzZDREM4MTkzODdDQUQwNjUx QjBDRjM4QjAeFw0yNjA2MDIwNTQyMDhaFw0yNjA2MDMwODQzMDhaMDMxMTAvBgNV BAMTKDE1NTcxQTc2MzhDQjU3MTNGMTE0NjZFRTk1MTIxMTZDRjZFMDc4QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc6LtwvQV0/6bnGdyVuacoLDpr jJtEbOWEizqPqi/fCKwFjCOY7MN/uKlNemWy1YAS6jOEwusGFFhKZf1W1GiH5hwM HC2eP+8W8OQng12PD+brovKw7gQe41pe8ikcdTU2G+NfLh+sX0/QjLMkGJw7vSXf hsfmmbFCwVr66Y4IWtSUA6sH0Jk6YgtL6cVwFPCXZirguuKAgu3QDfk3Zl6x0guq Rym4n5QZX+PFjMxFJ1ygYbLG6L/kRqwSlxscxUQkx4qxIt96rSaugVLgTmHGh1rW jTPE0RWC89j9lMTAmehGZ3Q+oQOITzHRwClebKNjnoFOvHztT0EAAdmHHd2NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFVcadjjLVxPxFGbulRIRbPbgeLowHwYDVR0j BBgwFoAUjwSbQ91hKFxs3IGTh8rQZRsM84swDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MGJiMjkzNzgtNDVmMC00OWQzLWE2YWYtNTczYmU3ZGNhNmQwLzAvOEYwNDlCNDNE RDYxMjg1QzZDREM4MTkzODdDQUQwNjUxQjBDRjM4Qi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84RjA0OUI0M0RENjEyODVDNkNEQzgxOTM4N0NBRDA2NTFCMENG MzhCLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMGJiMjkzNzgtNDVmMC00OWQzLWE2 YWYtNTczYmU3ZGNhNmQwLzAvOEYwNDlCNDNERDYxMjg1QzZDREM4MTkzODdDQUQw NjUxQjBDRjM4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGemDzcFwrYAB+SIWboeZEkxqTlZb6Mt/1j0 ZvuGlpTFFhJPJL8Wv9jhQ+rF2E6zCWldL5cDq9CwuGKOKPxOXdFiKybta8lJFlXG YdGcW6omCtcyxBOuxDUa0IMz66ASq5az6Lz+xmljOuN1WIpxzNrzBMXtdWVM1KcG 1iDZqdomWyaTUVDQWP8F3WT8HdqfcLAY7ZTe9rok8JKWoSU1Un/fW9gdYgbGgRaw U1CXGm3HoN8W2liU7aDYOor+W8FXaujAvQKHSASc3PccALQH87BlfmwJC4qdDDWx J7OPBK07BOBGeyHa/9ArABqxBsVhVO/7S+eglly7PdoNjgOKUlo= -----END CERTIFICATE-----Generated at Tue Jun 2 21:43:22 2026 by rpki-client